Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft
File:                     8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft (raw, json)
Hash identifier:          uhZqsQjXiQGi9Izmzbyzb1gbRTgS5b8SJGi65thARBc=
Subject key identifier:   C3:8C:A7:26:81:13:91:11:4C:A9:20:60:B3:A6:E0:FE:D4:19:40:84
Authority key identifier: F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA
Certificate issuer:       /CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
Certificate serial:       019CAC0FF8B8851F9B066064FCCC491B6836
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 01:00:53 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:53 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:53 +0000
Files and hashes:         1: 8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl (hash: kQ5+37owolSmW5IvPxODvRWwcEg63gQtVhUqarikgII=)
                          2: G7HS4Pe64aq7LX7Ac6sahYxcvsg.roa (hash: CRoiGyn3+g1TcYhralq7D2YpvKZFCAsmyg1ItQBPBYo=)
                          3: d79pVbNl6KV7mE-TmGcgiFhhpy0.roa (hash: 6sQKNK+i7JugUTkWCMHqg5UJuTLwVJ2b0IOTbHFw/EY=)
                          4: uGF8_MSgyhQ8dAHm23AhHh6NWz0.roa (hash: sxZlIQb25hDFz3ykb8U9qXE3lTMI/4iHplhe6RLTs2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:0f:f8:b8:85:1f:9b:06:60:64:fc:cc:49:1b:68:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
        Validity
            Not Before: Mar  2 01:00:53 2026 GMT
            Not After : Mar  3 01:00:53 2026 GMT
        Subject: CN=c38ca726811391114ca92060b3a6e0fed4194084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:22:da:d0:04:d6:c8:cb:6c:6a:7a:ac:09:fb:
                    47:a9:ce:8d:8a:88:65:b0:8a:ac:ee:44:f1:ed:2a:
                    01:84:d1:8d:b4:cb:d0:a8:74:83:b1:56:5e:bd:2b:
                    6b:9a:ec:25:fc:4c:3a:9e:7c:37:07:e2:15:68:73:
                    61:31:2a:05:bf:8f:86:93:9f:17:23:37:f6:76:26:
                    a8:42:c9:ca:26:17:7f:01:ea:98:63:06:26:ed:6b:
                    a4:99:e4:67:dc:9c:a6:50:ee:29:2c:b2:91:25:ac:
                    9a:ae:b9:6d:05:7a:c6:79:e8:bd:a9:bf:72:95:65:
                    09:c9:e4:63:5c:54:4c:50:0d:4b:40:6b:f5:ee:29:
                    81:63:32:0d:67:b5:91:81:87:db:f2:6d:30:e3:29:
                    e0:ff:fc:f0:19:82:57:da:e7:ab:11:56:87:00:57:
                    9a:1e:5e:70:16:27:f5:64:76:90:74:05:a9:ec:68:
                    b4:0d:e6:6d:17:30:70:85:9d:23:ee:0e:14:37:77:
                    63:fc:51:2b:14:cc:41:0f:ba:f4:58:9e:c5:35:1c:
                    66:d7:c5:3e:3a:2d:a6:52:3e:42:28:7f:4d:41:0f:
                    77:a3:76:98:ef:2c:df:52:52:ca:aa:0a:61:9a:cb:
                    3b:7f:1f:b6:c8:b9:13:52:ae:7d:0f:f9:83:46:03:
                    e4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8C:A7:26:81:13:91:11:4C:A9:20:60:B3:A6:E0:FE:D4:19:40:84
            X509v3 Authority Key Identifier:
                keyid:F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:76:23:75:42:21:de:62:44:a3:f9:a9:5f:8c:7e:ac:b6:25:
         d5:de:6b:a4:05:fc:51:13:af:8d:e2:74:fa:5d:96:9a:44:f9:
         3f:08:d7:a1:0e:48:4c:4f:d0:28:d6:74:75:9b:83:3f:34:18:
         4d:d4:de:d5:12:a6:62:af:32:76:43:92:a4:08:24:80:b5:be:
         f7:a7:d0:c9:f6:19:e6:2b:cc:53:fd:b4:26:dd:24:8f:5b:c3:
         f5:55:86:66:72:15:54:8a:b4:37:e3:6e:3f:47:5a:df:5c:0d:
         46:72:69:a3:5b:d6:63:a0:3a:7e:5f:c0:92:77:8c:04:b2:d7:
         49:78:e0:02:c4:32:60:4c:2a:a4:1a:20:77:11:16:a1:57:13:
         4b:a2:ef:54:68:80:55:2f:a6:43:54:6b:d0:32:e9:93:c6:3d:
         4f:5d:01:c2:30:94:ca:77:16:2f:44:88:65:e5:4f:af:7c:5a:
         d8:86:cf:32:e7:5a:94:a8:71:18:f9:0d:db:4f:60:3a:63:9f:
         8a:38:31:d5:62:5a:6a:ae:c6:9e:aa:3b:1a:02:0b:a8:33:80:
         ef:51:87:03:7d:d5:a4:a0:d0:ff:e7:85:ae:66:f5:54:2c:a7:
         44:9f:35:fb:9b:3e:8a:6c:fe:40:cf:a2:8e:dd:7f:7c:74:05:
         20:0f:95:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:37:01 2026 by rpki-client